<html>
<head><meta charset="utf-8"><title>cargo-lock 5.0.0 · wg-secure-code · Zulip Chat Archive</title></head>
<h2>Stream: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/index.html">wg-secure-code</a></h2>
<h3>Topic: <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html">cargo-lock 5.0.0</a></h3>

<hr>

<base href="https://rust-lang.zulipchat.com">

<head><link href="https://rust-lang.github.io/zulip_archive/style.css" rel="stylesheet"></head>

<a name="210934357"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/210934357" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#210934357">(Sep 22 2020 at 21:36)</a>:</h4>
<p><span class="user-mention" data-user-id="127617">@Shnatsel</span> FYI, just released <code>cargo-lock</code> v5.0.0-rc: <a href="https://github.com/RustSec/cargo-lock/issues/68">https://github.com/RustSec/cargo-lock/issues/68</a></p>



<a name="210934376"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/210934376" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#210934376">(Sep 22 2020 at 21:36)</a>:</h4>
<p>last chance for any SemVer breaking changes before another release</p>



<a name="210938261"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/210938261" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#210938261">(Sep 22 2020 at 22:15)</a>:</h4>
<p>Thanks for the heads-up. I'll need to get <code>auditable-serde</code> updated to this. Can't do it right now (it's midnight here) but I'll try to check it out in 16 hours from now or so.</p>



<a name="211026834"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/211026834" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#211026834">(Sep 23 2020 at 16:19)</a>:</h4>
<p>Yeah, the upgrade for <code>auditable-serde</code> works completely seamlessly. Just bump version and go.</p>



<a name="211267129"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/211267129" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#211267129">(Sep 25 2020 at 14:46)</a>:</h4>
<p>The 6.0.0 release makes me think that the interop really should live in <code>cargo-lock crate</code>, not in <code>auditable-serde</code>. Right now I have to bump semver of <code>auditable-serde</code> to have interop with <code>cargo-lock</code> 4.0.0 instead of 6.0.0 even though no code in <code>auditable-serde</code> actually changed.</p>



<a name="211267264"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/211267264" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Shnatsel <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#211267264">(Sep 25 2020 at 14:47)</a>:</h4>
<p>(I've sidestepped the <code>semver</code> crate mismatch by roundtripping the version info through a string)</p>



<a name="211332224"></a>
<h4><a href="https://rust-lang.zulipchat.com#narrow/stream/146229-wg-secure-code/topic/cargo-lock%205.0.0/near/211332224" class="zl"><img src="https://rust-lang.github.io/zulip_archive/assets/img/zulip.svg" alt="view this post on Zulip" style="width:20px;height:20px;"></a> Tony Arcieri <a href="https://rust-lang.github.io/zulip_archive/stream/146229-wg-secure-code/topic/cargo-lock.205.2E0.2E0.html#211332224">(Sep 26 2020 at 00:32)</a>:</h4>
<p>Yeah, <code>semver</code> v0.11 caught me by surprise. and even better, it seems to contain breaking changes and RustSec/advisory-db no longer parses with it</p>



<hr><p>Last updated: Aug 07 2021 at 22:04 UTC</p>
</html>